CD&E-Cyber Security- Penetration Testing-Senior Associate - Bangalore

A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges

You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resilency, response, and technical implementation activities

You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe



The Cyber Penetration Testing (CPT2) team focuses on delivering threat actor simulation services, device or application assessments, and penetration tests

You will help clients understand the tangible risks they face from a variety of threat actors and what they target to include different postures, scenarios, or targeted assets

Working as a member of CPT2 also provides the opportunity to directly help clients enhance or tune their preventative, and detective controls on a proactive basis



Our team focuses on assessment and recommendation services that blend deep technical manual tradecraft with targeted automation to simulate real threats to a client s environments

As a part of this center of excellence, you will drive change at PwC s clients by providing risk outside of the theoretical while contributing to the technical acumen of the practice and amplifying your own personal capabilities

• Use feedback and reflection to develop self awareness, personal strengths and address development areas
  
  
• Delegate to others to provide stretch opportunities and coach to help deliver results
  
  
• Develop new ideas and propose innovative solutions to problems
  
  
• Use a broad range of tools and techniques to extract insights from from current trends in business area
  
  
• Review your work and that of others for quality, accuracy and relevance
  
  
• Share relevant thought leadership
  
  
• Use straightforward communication, in a structured way, when influencing others
  
  
• Able to read situations and modify behavior to build quality, diverse relationships
  
  
• Uphold the firms code of ethics and business conduct
  
  

• 48 years of industry experience in Web and Mobile Application security assessment
• Familiarity with application security guidelines/requirements from OWASP, OSSTMM, NIST CSF
• Experience in security assessment activities within a client s environment, emphasizing manual stealthy testing techniques using commercially / freely available offensive security tools and utilities built into operating systems
• Hands on experience on security testing tools, such as Burp Suite, Mimikatz, Cobalt Strike , PowerSploit, Metasploit, Nessus, Web Inspect or other tools included within the Kali Linux distribution
• Should have common programming and scripting skills such as Python, PowerShell, Ruby, Perl, Bash, JavaScript, or VBScript
• Must have indepth knowledge of modern web and mobile applications
• Good knowledge of security fundamentals, Networking protocols, TCP/IP stack, systems architecture, and operating systems
• Good understanding of cloud technologies and its security best practices

• Good to have experience in presenting at national and international security conferences/events

• Excellent communication skills and executive presence that enable effective engagement with senior stakeholders
• Excellent written skills, ability to interpret a security scenario & document a summary
• Participating actively in client discussions and meetings and communicating a broad range of potential addon services based on identified weaknesses
• Demonstrates proven extensive abilities with leveraging creative thinking and problemsolving skills, individual initiative
• Communicating in an organized and knowledgeable manner in written and verbal formats including delivering clear requests for information and communicating potential conflicts
• Must communicate consistently and drive objectives, relying on factbased decisions about risk that optimize the tradeoff between risk mitigation and business performance
• Good presentation, project management, facilitation and delivery skills as well as strong analytical and problemsolving capabilities
• Develop/Implement automation solutions and capabilities that are clearly aligned to client business, technology and threat posture
• Demonstrates ability to track developments and changes in the digital business and threat environments to ensure that theyre adequately addressed in client s security strategy plans and architecture artifacts